Scalable server architecture based on asymmetric 3-way TCP

    公开(公告)号:US20060155805A1

    公开(公告)日:2006-07-13

    申请号:US10829399

    申请日:2004-04-22

    Applicant: Han-gyoo Kim

    Inventor: Han-gyoo Kim

    Abstract: A server architecture based on asymmetric 3-way TCP (ATCP) is disclosed that can distribute the work among multiple processors. In particular, the server system has a front-end server receiving a service request from a client. The server system also has a back-end server that receives a command from the front-end server. The back-end server sends the result back directly to the client in a pseudo packet that looks like a packet sent from the front-end server. The pseudo packet has the IP address and the port number of the front-end server. A scalable system is achieved because the bottleneck through the front-end server is avoided.

    Router device and cut-through path control method for realizing load balancing at intermediate routers
    193.
    发明申请
    Router device and cut-through path control method for realizing load balancing at intermediate routers 失效
    路由器设备和中间路由器实现负载分担的直通路径控制方法

    公开(公告)号:US20060109853A1

    公开(公告)日:2006-05-25

    申请号:US11313643

    申请日:2005-12-22

    Abstract: A router device and a cut-through path control method capable of carrying out the load balancing at an intermediate router device which actually has a multi-path information, without requiring a special processing at the edge router are disclosed. At a router device at which multi-path exists, one router among a plurality of routers that can possibly be a next hop router is selected so as to contribute to a load balancing, according to a whole or a prescribed part of information regarding a state of cut-through path set up in which the router device is involved, at a time of setting up a cut-through path in the multi-path, and a prescribed control for setting up the cut-through path with that one router as the next hop router is carried out. Also, one cut-through path that contributes to the load balancing when a route change is made is selected among cut-through paths for which the route change at the router device is possible, and a route of that one cut-through path is changed so as to contribute to the load balancing.

    Abstract translation: 公开了一种能够在实际具有多路径信息的中间路由器设备上执行负载均衡的路由器设备和直通路径控制方法,而不需要边缘路由器的特殊处理。 在存在多路径的路由器设备中,选择可能是下一跳路由器的多个路由器中的一个路由器,以便有助于负载平衡,根据关于状态的全部或规定的一部分信息 在设置多路径中的直通路径的时候,设置路由器设备所涉及的直通路径,以及用该路由器设置直通路径的规定控制,作为 下一跳路由器被执行。 此外,在进行路由改变时有助于负载均衡的一条直通路径被选择为可能在路由器设备处的路由改变的直通路径中,并且该一条直通路径的路由被改变 从而有助于负载平衡。

    Firewall load balancing using a single physical device
    194.
    发明申请
    Firewall load balancing using a single physical device 有权
    使用单个物理设备进行防火墙负载平衡

    公开(公告)号:US20050257256A1

    公开(公告)日:2005-11-17

    申请号:US10835794

    申请日:2004-04-30

    Abstract: Methods and systems for load balancing a plurality of entities, such as firewalls, in a network environment are disclosed. In particular, the load balancing of firewalls on a bidirectional traffic path is performed using a single device that controls both incoming and outgoing traffic through the firewalls. The single device may include virtual routers for controlling the bidirectional traffic through the firewalls. A first virtual router may control incoming traffic to the firewalls and the other virtual router may control outgoing traffic to the firewalls. The virtual routers are logical partitions of the device layered on the physical resources of the device. The virtual routers share all or portions of the physical resources of the single device.

    Abstract translation: 公开了用于在网络环境中负载平衡诸如防火墙的多个实体的方法和系统。 特别地,双向流量路径上的防火墙的负载平衡使用单一设备来执行,该设备通过防火墙控制入站和出站流量。 单个设备可以包括用于控制通过防火墙的双向流量的虚拟路由器。 第一个虚拟路由器可以控制到防火墙的传入流量,另一个虚拟路由器可以控制到防火墙的传出流量。 虚拟路由器是在设备的物理资源上分层的设备的逻辑分区。 虚拟路由器共享单个设备的全部或部分物理资源。

    Adaptive load balancing
    195.
    发明申请
    Adaptive load balancing 有权
    自适应负载均衡

    公开(公告)号:US20050102393A1

    公开(公告)日:2005-05-12

    申请号:US10712130

    申请日:2003-11-12

    Abstract: The invention provides techniques for adaptive load balancing. Techniques are provided for monitoring a server's operating conditions; determining, based on the server's operating conditions, when to send a behavior modification hint to one or more clients that are being served by the server; generating the behavior modification hint based on the server's operating conditions; and sending the behavior modification hint to the one or more clients. A client receives the behavior modification hint and, based on the behavior modification hint, alters a timeout value related to the server or alters its preferred server.

    Abstract translation: 本发明提供了用于自适应负载平衡的技术。 提供技术来监控服务器的运行状况; 基于服务器的操作条件确定何时向由服务器服务的一个或多个客户端发送行为修改提示; 根据服务器的运行状况生成行为修改提示; 并向一个或多个客户端发送行为修改提示。 客户端接收行为修改提示,并根据行为修改提示更改与服务器相关的超时值或更改其首选服务器。

    Firewall clustering for multiple network servers
    196.
    发明授权
    Firewall clustering for multiple network servers 有权
    多台网络服务器的防火墙集群

    公开(公告)号:US06880089B1

    公开(公告)日:2005-04-12

    申请号:US09540297

    申请日:2000-03-31

    Abstract: A firewall clustering system connects two or more firewalls between an internal network and an external network. The plurality of two or more firewalls are combined to supply high-availability and scaling of processing capacity. Firewalls maintain client-server state information. Flow controllers are connected to the firewalls and placed on both the internal “trusted” side and the external “untrusted” side of the firewalls. Flow controllers are placed on both sides of the firewalls to ensure that traffic for a given client-server session flows through the same firewall in both inbound and outbound directions. The firewalls perform filtering operations and/or network address translation (NAT) services. In both cases, the flow controllers supply high availability, scalability, and traffic distribution for the firewalls in the firewall cluster.

    Abstract translation: 防火墙集群系统连接内部网络和外部网络之间的两个或多个防火墙。 多个两个或更多个防火墙被组合以提供高可用性和缩放处理能力。 防火墙维护客户端 - 服务器状态信息。 流量控制器连接到防火墙,并放置在防火墙的内部“受信任”端和外部“不受信任”端。 流量控制器放置在防火墙的两侧,以确保给定客户端 - 服务器会话的流量在入站和出站方向上流经同一防火墙。 防火墙执行过滤操作和/或网络地址转换(NAT)服务。 在这两种情况下,流量控制器为防火墙集群中的防火墙提供高可用性,可扩展性和流量分配。

    Automatic allocation of least loaded boot server to PXE client on a network VIA DHCP server
    197.
    发明授权
    Automatic allocation of least loaded boot server to PXE client on a network VIA DHCP server 失效
    将最不负载的引导服务器自动分配给网络上的PXE客户端VIA DHCP服务器

    公开(公告)号:US06871210B1

    公开(公告)日:2005-03-22

    申请号:US09655093

    申请日:2000-09-05

    Abstract: This invention relates to a method, system and the computer readable program product wherein the least loaded boot server is prioritized for service by a single DHCP/PXE server by maintaining a boot server allocation table (SAT) containing the existing client load count for each boot server, maintaining a client allocation table (CAT) associating each client IP address with the corresponding boot server IP address, prioritizing the boot servers by sorting said SAT in order of increasing load count whenever it is updated and providing the IP address of the boot servers in the sequence of their listing in said SAT for access whenever a client requests the DHCP.

    Abstract translation: 本发明涉及一种方法,系统和计算机可读程序产品,其中通过维护包含每个引导的现有客户端负载计数的引导服务器分配表(SAT),通过单个DHCP / PXE服务器将最不负载的引导服务器优先于服务 服务器,维护将每个客户端IP地址与对应的引导服务器IP地址相关联的客户端分配表(CAT),通过按照更新时增加负载计数的顺序排列所述SAT来优先处理引导服务器,并提供引导服务器的IP地址 在客户端请求DHCP时,在SAT中列出的顺序。

    Addressing method and system for using an anycast address
    198.
    发明申请
    Addressing method and system for using an anycast address 审中-公开
    使用任播地址的寻址方法和系统

    公开(公告)号:US20040107234A1

    公开(公告)日:2004-06-03

    申请号:US10469414

    申请日:2003-08-29

    Inventor: Jarno Rajahalme

    Abstract: The present invention relates to an addressing method and system for using an anycast address, wherein a data source or server (21 to 23) can be registered in a network device to become a possible receiver for anycast traffic for a specific anycast address. This is achieved by providing a mapping and binding update function of the anycast address to the server's real address. The anycast server can provide authentication data to the client providing a proof that the server indeed has been authorized to respond to the used anycast address. Thereby, an anycast address can be used as a source address and an authorization of anycast servers can be provided.

    Abstract translation: 本发明涉及一种使用任播地址的寻址方法和系统,其中数据源或服务器(21至23)可以登记在网络设备中,以成为用于特定任播地址的任播通信的可能接收机。 这是通过向服务器的真实地址提供任播地址的映射和绑定更新功能来实现的。 任播服务器可以向客户端提供认证数据,提供服务器确实已被授权响应所使用的任播地址的证据。 因此,可以使用任播地址作为源地址,并且可以提供任播服务器的授权。

    Mobile director
    199.
    发明申请
    Mobile director 有权
    移动总监

    公开(公告)号:US20040092260A1

    公开(公告)日:2004-05-13

    申请号:US10265563

    申请日:2002-10-03

    Abstract: Methods and apparatus for processing registration requests by a Home Agent supporting Mobile IP are disclosed. A registration request is received from each of a plurality of Mobile Nodes, the registration request specifying a care-of address. A binding is established between each of the plurality of Mobile Nodes and the associated care-of address, each of the plurality of Mobile Nodes being associated with one another. For instance, the plurality of Mobile Nodes may be statically or dynamically assigned the same Home Address. A tunnel is then created between the Home Agent and the care-of address for each of the plurality of Mobile Nodes, thereby enabling a server request to be distributed by the Home Agent to one of the plurality of Mobile Nodes via the associated tunnel. For instance, a server request addressed to the Home Address may be forwarded to one of the Mobile Nodes assigned that Home Address.

    Abstract translation: 公开了由支持移动IP的归属代理处理注册请求的方法和装置。 从多个移动节点中的每一个接收注册请求,注册请求指定转交地址。 在多个移动节点中的每个移动节点和相关的转交地址之间建立绑定,多个移动节点中的每一个彼此相关联。 例如,多个移动节点可以静态地或动态地分配相同的归属地址。 然后在归属代理和多个移动节点中的每一个的转交地址之间创建隧道,从而使得归属代理能够经由相关联的隧道将服务器请求分发给多个移动节点之一。 例如,寻址到归属地址的服务器请求可以被转发到分配给归属地址的移动节点之一。

    User selector proxy, method and system for authentication, authorization and accounting
    200.
    发明申请
    User selector proxy, method and system for authentication, authorization and accounting 有权
    用户选择器代理,认证,授权和计费的方法和系统

    公开(公告)号:US20030217285A1

    公开(公告)日:2003-11-20

    申请号:US10410336

    申请日:2003-04-09

    Abstract: The basic problem addressed by the present invention is the free disposition of users, without restrictions on users identifiers, among a plurality of AAA-servers within an ISP network for allowing AAA-service network scalability and for hiding the AAA-service network configuration to external AAA-clients. The present invention solves the problem discussed above by placing a User Selector Proxy as entry point to the AAA-service network within an ISP network, the User Selector Proxy responsible for determining an AAA-server in charge of the user and able to direct AAA-service requests to the appropriate AAA-server.

    Abstract translation: 本发明解决的基本问题是在ISP网络内的多个AAA服务器之间对用户标识符进行自由配置,以允许AAA服务网络的可扩展性,并将AAA服务网络配置隐藏到外部 AAA客户端。 本发明通过将用户选择器代理作为入口点设置到ISP网络内的AAA服务网络来解决上述问题,用户选择器代理负责确定负责用户的AAA服务器,并且能够指导AAA- 服务请求到相应的AAA服务器。

Patent Agency Ranking